Planning security filter got corrupted

Hi Hyperion Gurus,
We are using Hyperion 9.3.0 and recently found that security filter of one of the Planning user has been corrupted, whenever that user logs in Excel addin or Smart view the essbase service goes down and when I try to open the security filter through AAS it again brought the service down, this led me to think that the filter has been corrupted.
I have deprovisioned the user from Shared Service and after that refreshed the security in AAS to sync with Shared Service this removed the user from Essbase system now I tried to delete the filter through aas and also by running maxl script but am not able to delete it and every time I try to delete this brings the service down. I was planning to refresh the security from Planning apps now but am bit scared to do that as am not sure if this will corrupt essbase security file.
So my questions to you all are
1. How to delete this corrupted security filter.
2. Will refreshing the security from Planning can remove this filter as the user has been deprovisioned from Shared Service.
3. What all steps need to be taken before refreshing security from Planning so that if there is any serious issue system can be restored back.
Thanks in advance.

Hi,
We had the same issue with a corrupted security filter. Any time the filter was referenced it would bring down essbase. In 9.3.1 you can export security (right click the security object). What we saw ws when the export hit the bad filter it would shut down essbase. We discovered which filter was bad because the output from the export would stop right before the bad filter.
The bad news is there is not a way to delete the bad filter AAS or Maxl. So you need to find a backup security file that is good and will export. Once you do that i would think that you could create or refresh the security filters from the planning web and it would re-create the users/filters in essbase.
Keith

Similar Messages

  • Planning Security Filter refresh and Essbase is Crashing

    Hi,
    I am on System 9.3.1 and I am doing a Planning security filter refresh and Essbase is Crashing. Please advise in this case.
    Security is fine on this cube. It used to work fine earlier. Now from few days we are facing this issue.

    We see same issue in 9.2.0.3, but only with 1 of our 5 applications. Was never able to get support to identify a cause, our resolution is to push users in small groups and save the essbase.sec file. Real pain. You could try stopping essbase service, using essbase.bak file and restarting then try to push and see if it works. I did identify issues with our openLDAP which I felt was the cause, I was able to clean it up in TEST and it works, but did same in Prod and worked once, then reverted back to crashing again, unless we push users in really small groups. Interested to see if you get a 'fix' from someone...

  • Security filter couldn't refresh to Essbase from Planning but could create

    Please kind help on look at this issue.
    I updated some dimension access in Planning,and did a security refresh in management database menu.But the access didn't refresh to Essbase filter.
    Then created filter in management security filter menu,it refreshed to Essbase successfully.
    I would grateful if someone could tell me why the first way unsuccessful.
    Thanks,

    If you go to Oracle Support and search on "planning security refresh" you will see lots of articles on this subject.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Security filter setup missing in one of the planning applications

    We noticed recently that our users in one of the planning applications were not able to access any data.
    Then we noticed that the entire security filter setup went missing/wipped out for that application and had to set up manually and then a security refresh had to be done to restore security.Any suggestions about the root cause for this issue.We have not been able to find out much about this
    Thanks

    jts wrote:
    It would have been curious if you would have gone to Essbase and sync from Shared Services in the security section to see if the security filters would have repopulated in planning.Filters are stored on the essbase side (essbase.sec) and not in shared services so I wouldn't of thought syncing from HSS to essbase would make any difference
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Planning v11.1.2.1  Manage Security Filter "Create" blew away security

    Was testing security for a Native Directory user id and as 'admin'. Did the following within a Planning application (we have several apps):
    Administration > Manage Security Filter
    - checked the box for the Native Directory ID.
    Here it comes.... clicked "Create".
    I have a Shared Services window that was already opened. I can see that all groups are blown away.
    Other symptoms are that that ADMIN id can no longer see any applications with Workspace, or anything else.
    Also Admin id cannot log into EAS
    O_o.
    We have some old LCM dumps available, but still checking as to whether they have everything.
    Solution ideas.

    Do you not backup the planning applications schema/db, just revert back to a previous back up.
    Then if you can recreate the security being wiped and prove it is nothing wrong with your process then log it with Oracle.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Failed to refresh user's security filter

    Hi - I'm having an issue with a user ID. User was having a lot of problems doing Essbase retrievals in Excel, so tried refreshing their security filter in Hyperion Desktop. I get a 'security filters were created successfully except for: username."
    So I recreated her ID in Planning, removed her ID in Essbase and removed her filters in Essbase. I added back all the groups that she belongs to in Planning, now I am back in Hyperion Desktop trying to do a push down for her ID and I still get the same error message.
    Then I went to some other people's ID, highlighted their name and did a refresh, some of the say successful, some of them give me the same error message about security filter refreshed except for: username".
    What in the world can be causing this?
    Planning 3.5.1
    Essbase 7
    Edited by: CLAU on Feb 25, 2010 7:29 AM

    also<BR><BR>DISPLAY PRIVILEGE USER ALL; will list all privileges granted to a user directly. Any line that isn't "no access" means that the user has privileges assigned outside a group. I periodically do ann audit on our systems to ensure we have't got any direct users that have privileges granted outside groups.<BR><BR>Of course anyone tagged individually as a supervisor will come up on this check.

  • Autometic planning security refresh is not refreshing the security filters

    Hi Friends,
    We are using Hyperion planning system 9.3.1. While refreshing the planning security through automated script its not getting refreshed the security filters. In log its showing filter refreshed successfully but actually it’s not refreshing the filters. But when we are doing it manually from planning web its working fine. One more thing we are doing security refresh on daily basic as per business request. So daily its dropping the filters we refreshed manually from planning web.
    we are using the below scripts:
    CALL G:\Hyperion\Planning\bin\CubeRefresh.cmd /A:application_name /U:user_name /P:password /R /FSV /DEBUG >> In\Log\Refresh_HPOPROD.log
    Any help will be appreciated.
    Thanks,

    I guess you are missing /D

  • Issue in Implementing OR Logic in Security Filter for Essbase in OBIEE

    I am implementing OBIEE using Essbase as the data source. The requirement is to implement OR logic in the security filter. And I got error message from the MDX query generated by OBIEE. Below is the details. Anyone knows how to solve this issue? Thank you very much.
    1.     The &ldquo;Booking Location&rdquo; dimension has three hierarchies (ragged hierarchies).
    http://img.photobucket.com/albums/v216/stewart_life/1.png
    2.     I only want to take the first hierarchy, which is &ldquo;Total booking&rdquo;. Thus, I filter the Logical Table Source of &ldquo;Booking Location&rdquo; in the business model layer.
    http://img.photobucket.com/albums/v216/stewart_life/2.png
    3.     The &ldquo;Incorporation Country&rdquo; dimension doesn&rsquo;t have any multiple hierarchies.
    http://img.photobucket.com/albums/v216/stewart_life/3.png
    4.     Thus, I don&rsquo;t filter the Logical Table Source of &ldquo;Incorporation Country&rdquo; in the business model layer.
    http://img.photobucket.com/albums/v216/stewart_life/4.png
    5.     I filter the permission of a user. This filter applied to the fact table (RISK) in the business model layer.
    http://img.photobucket.com/albums/v216/stewart_life/5.png
    6.     Then the filter applied so that the particular user can only see the data where the Incorporation Country level is Singapore OR the Booking Country level is Singapore:
    "Risk"."Incorporation Country"."Country" = 'SINGAPORE (INC)' OR "Risk"."Booking Location"."Booking Country" = 'SINGAPORE (CBE)'
    http://img.photobucket.com/albums/v216/stewart_life/6.png
    7.     Here is the first report that is working fine if run by a user without any security filter.
    http://img.photobucket.com/albums/v216/stewart_life/7.png
    8.     The result of that report when run by the user whose security filter above has been applied to.
    http://img.photobucket.com/albums/v216/stewart_life/8.png
    9.     The MDX query generated from that report is shown below. Note that the error refers to the line 4, which is in bold below. Somehow, the query generated always include Incorporation Country and Booking Location in the &ldquo;With&rdquo; clause, since both of them are placed in the security filter.-----
    Sending query to database named Risk-MI Essbase (id: &lt;&lt;399750&gt;&gt;):
    With
    set [Booking Location2|http://forums.oracle.com/forums/] as '{[Booking Location|http://forums.oracle.com/forums/].[Total booking|http://forums.oracle.com/forums/]}'
    set [Booking Location4|http://forums.oracle.com/forums/] as 'Generate({[Booking Location2|http://forums.oracle.com/forums/]}, Descendants([Booking Location|http://forums.oracle.com/forums/].currentmember, [Booking Location|http://forums.oracle.com/forums/].Generations(4),SELF), ALL)'
    *set [Incorporation Country4|http://forums.oracle.com/forums/] as ''*
    set [Time3|http://forums.oracle.com/forums/] as 'Time.Generations(3).members'
    set [Year2|http://forums.oracle.com/forums/] as 'Year.Generations(2).members'
    member Measures.[MS1|http://forums.oracle.com/forums/] as 'Rank(Time.Generations(3).Dimension.CurrentMember, Time.Generations(3).Members)'
    set [Axis1Set|http://forums.oracle.com/forums/] as 'crossjoin ({[Booking Location4|http://forums.oracle.com/forums/]},crossjoin ({[Incorporation Country4|http://forums.oracle.com/forums/]},crossjoin ({[Time3|http://forums.oracle.com/forums/]},{[Year2|http://forums.oracle.com/forums/]})))'
    select
    {Measures.[Netted EAD|http://forums.oracle.com/forums/],Measures.[Netted Nominal|http://forums.oracle.com/forums/],Measures.[Wt_LGD|http://forums.oracle.com/forums/],
    MS1} on columns,
    NON EMPTY filter({[Axis1Set|http://forums.oracle.com/forums/]}, [Incorporation Country|http://forums.oracle.com/forums/].currentmember IS [Incorporation Country|http://forums.oracle.com/forums/].[SINGAPORE (INC)|http://forums.oracle.com/forums/] OR [Booking Location|http://forums.oracle.com/forums/].currentmember IS [Booking Location|http://forums.oracle.com/forums/].[SINGAPORE (CBE)|http://forums.oracle.com/forums/]) properties ANCESTOR_NAMES, GEN_NUMBER on rows
    from [http://RISK-P.RISK]
    where ([CRG (ORG)|http://forums.oracle.com/forums/].[Good Book (ORG)|http://forums.oracle.com/forums/], Method.ADV)
    +++stewart:370000:370021:----2009/02/17 13:56:06
    Query Status: Query Failed: Essbase Error: Syntax error in input MDX query on line 4 at token '''

    From what I have read on this forum, people have managed to get the DC In Board replaced for a little over US $100. This would be at an Apple authorized repair shop rather than by Apple itself. This is much less than the cost of a new MacBook. I don't know what might be available in your area, but it would be worth asking at a repair shop.
    Good luck!

  • Operating System(Windows 7) got corrupted ..!

    Hi all,
    Can someone please help me with my laptop issue ???
    My Laptop Details :
    Product name         :  HP Pavilion dv6 Notebook PC
    Operating System :  Windows 7 Home Premium
    RAM                             :  6GB
    Processor                  :  Intel(R) Core(TM) i3 CPU [email protected](2400MHz)
    Purchase                   :  Decemeber, 2010.
    My Laptop problem :
    My HP-laptop got infected with "virus" ( it says like found 38 virus).
    And because of this virus attack , I was NOT able to open any application , for example say if i try to open "notepad" - then throws a message like " unable to open notepad application, though infected with virus".
    So with this , i can confirm that my laptop was NOT allowing me to open anything because infected with virus.
    Now i have 2 options to go further :
    1) Remove virus , using antivirus removal software ( This i don't have , so NOT attempting to use)
    2) Recover thru recovery option.
    When i purchased this laptop , the laptop contains recovery partition within the laptop , so it's a built-in option.
    Though i was NOT interested to keep that recovery partition in my laptop, I just burned recovery manager into 7 DVDs, and then deleted the partition.
    With this my laptop contains drives like :
     C: drive --> this contains OS related stuff
    D: drive --> this contains my general stuff like songs , movies , etc
    System drive --> 199MB ( not sure what thid contains )
    Now coming to original problem/issue -
    I have planned to use recovery DVDs , to recover to factory state.
    Started with 1st DVD , it went upto 18% and then asked me to insert 2nd DVD.. and this went upto 30%.. now again asked me to insert 3rd DVD.
    With 3rd DVD.. it went upto 40% , and then stopped responding. Nearly I've waited for about 3 hrs.. but NO use.. it's still hanged at 40% only.
    So with 3rd DVD , it got hanged or stopped.
    My doubt - not sure whether my 3rd DVD got corrupted or not , but i don't think so.. because 3rd DVD worked for atleast 10%..
    Finally , I was struck here...
    Not sure what's my next step
    Please help me what I have to do now, like  what steps to take... etc
    How to recover?
    Thanks
    Kiran

    Hi,
    Lets start with your providing the complete product name or product number. 
    HP has produced and brought to market perhaps more than 10,000 models of notebooks and desktop PCs over the years. It is difficult to help you if we don't know which one you own and which operating system is installed.
    Method #1: If the notebook will boot into Windows you can retrieve your Product Number by pressing Fn + Esc key. You can also read the Service Tag (if present) attached to the bottom of your notebook\netbook.
    Method #2:
    Remove the battery and look in the compartment where the battery was installed. You should see a printed part number and a product name. Please post one or both of them (with all alphanumeric characters here). If you live outside of North America, it helps us if you post the country of purchase.
    Were you using an antivirus product (free or paid) when this issue happened?
    What was the brand and product name of the Antivirus product?
    Best regards,
    erico
    ****Please click on Accept As Solution if a suggestion solves your problem. It helps others facing the same problem to find a solution easily****
    2015 Microsoft MVP - Windows Experience Consumer

  • Essbase Security filter in OBIEE 11.1.1.6 request

    Hello Experts
    I have got a requirement whereby I need to apply Data Level Securityfor the Essbase sourced cube in OBIEE11g. But the issue is the dimension value where I need to apply security filter has 25K distinct values and is Unbalanced Hierarchy where the leaf members is distributed across differnet level . Actually it is ragged heirarchy in Cube which when imported in OBIEE becomes a Level Based Heirarchy where the leafs becomes shared across differnet level. Now the general OBIEE rule says - Create separate application groups for each lowest level dimension vales and apply security filters for each values respectively for each group and assign users in those groups.
    But the issue is :
    1. Here there are 25 K members in the dimesional value where I need to apply Data Level Security . So it is not possible to create 25K distinct group.
    2. The dimension which needs to be used for Data level security has Ragged Hierarchy where the lowest leaf (which would eb used in security filter) is shared across differnet levels.So there is no single column that I can select in RPD to apply security filter.
    Pls. suggest a solution.
    Is there a way that I can source the Essbase Filters to work as Data Level security in OBIEE 11.1.1.6

    You can upgrade to 11.1.1.7 and use Weblogic to assign security, then EAS to apply filters, and then OBIEE Enterprise Mgr to apply the application roles (i.e. via Essbase Filters). The gotcha is that you need to install OBIEE 11.1.1.7 and include the Essbase component as part of the install.
    If you need more info let me know.
    Daniel Poon

  • Financial Reporting prompt-Show only members as defined by security filter?

    Hello all,
    Maybe another simple question but i have been unable to perform this task so far-
    We have created a security filter against the Company dimension in essbase, assigned it to a user, and that works ok.
    We have a report that prompts the user to choose members from for the Company Dimension.
    We would like this prompt to present the users only the members that are accessible per the security filter (i.e. al the descendants of the 'Northwest' member) for that particular user, since by default it presents all members of the Dim.
    Is this possible to do?
    Thank you very much for your help
    Hector

    I think what you want are METAREAD filters.Not that you're on Planning, but Planning goes to Essbase (eventually) and when it does so, it inexplicably uses READ instead of METAREAD -- it's the same issue.
    Here's an overview of it: http://camerons-blog-for-essbase-hackers.blogspot.com/2009/07/fixing-plannings-filters.html
    It should be as simple as clicking on the filter type dropdown in EAS to test if it works.
    Regards,
    Cameron Lackpour

  • Security filter verification failed

    Hi All,
    We are trying to create security filter which is combination of 4 sparse dimensions.
    The relationship between members in the filter is AND (so the filter will be created under one row).
    We encountered the below error in applying security filter
    ====
    [Mon Apr 13 03:42:16 2009]Local/GLOBAL///Error(1200467)
    Error parsing formula for [REGION DEFINITION]: status code [1130203] in function [@_U]
    [Mon Apr 13 03:42:16 2009]Local/GLOBAL///Error(1200467)
    Error parsing formula for []: status code [1130203] in function []
    ====
    It seems like if the combination of the members on the filter hit the limit of allocated memory, the filter got failed.
    Is there any way to calculate how many memory absorb in one filter?
    or is there any memory limitation for security filter?
    It will be great If anyone can share the experience of this issue.
    Thanks.
    Regards,
    Ai

    That's interesting, I have never head of a limit on the number of members that a filter can address. How many accounts do you have in your database?
    I took a look at the Limits section of the DBAG and found the following re filter limits:
    Filter name
    * Non-Unicode application limit: 30 bytes
    * Unicode-mode application limit: 30 characters
    Number of security filters
    * Per Essbase Server, 65535
    * Per Essbase database, 32290See: http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_esb_dbag/limits.htm#limits_1
    That's it -- nothing on the number of members that can be addressed in a filter. Of course it is possible (insert sacarsm, irony, or wonder per your personality) that the documentation is not correct.
    I have never run into what you described, but Essbase is vast and mysterious country, so perhaps that isn't so surprising.
    I'm glad you were able to find a workaround.
    Regards,
    Cameron Lackpour

  • Security Filter Problem

    Hi ,
    I am facing one problem related to security Filter for one user. We are on the Hyperion Version 11.1.2.1 Fusion Edition.
    We had one user created in Shared Services with ID : TESTUSER and added in the group. Initially access for this user was working fine. Later on we deleted this user from shared services as we no longer needed this.
    As per new requirement we are supposed to create a same user with same user name so we created again new user 'TESTUSER' and added into the same user group then we refreshed security from Planning Application through " Administration -> Application -> Refresh Database->Security Filters ". Refreshing security Filters created filter for above user and we checked this from EAS consol.
    However when we log in to the Application through Smart View we are getting the below Error.
    Cannot Open cube View.Essbase Error ( 1054060 ):Essbase Failed to select
    Application APP1, because TESTUSER@Native Directory is not\
    completely Provisioned by Planning.
    Could you please advice how could we resolve this issue.

    Check whether the user is only an Essbase user. (I don't think that is the case, but in case)
    Try changing the access type using
    alter user username add application_access_type Planning; (don't know whether this works in latest release)
    Try the stepsRAvery and _RahulS_mentioned.
    Tried that in 11.1.2.2 access_type Planning is defered.
    Regards
    Celvin
    http://www.orahyplabs.com

  • Essbase Security Filter issue.

    Hi,
    Its regarding the security filter issue.
    The major problem is whosoever user is provisioned under that security filter, if the user is trying to connect to Application using Excel Addin / Smartview, it crashes the essbase server [Network Error [10061], timed out error)]
    When we figured out because of this filter essbase server is crashing, we tried to edit the filter. sometimes if we click on edit, it crashes the server or sometimes we can see some junk characters in the filter.
    We have applied the security on Entities dimension and problematic filter is ASP.
    Now the hirerachy is like this.
    Entities dimesnsion and then ASP member and under ASP we have our several members.
    Filter is like this:
    Write : @Idescendants("ASP")
    It was working fine for almost 15 days.
    Now if i edit the filter, i can see like this:
    Write : @Idescendants("ASP")
    Metaread:@Idescendants("*&^%?)
    Junk characters are coming in and no idea from where they are coming.
    I can't delete the filter also, again it crashes the essbase server.
    As a workaround i have created a temp filter and dome the assignation for this group, according to that.
    Everything is working fine.
    I just wanted to know, has anybody faced such kind of problem earlier.
    What cud be the root cause for this.
    How could I delete the filter.
    I have also get messages like security file is corrupted (we have restored it from old backup) but really worried about security file as we are moving the whole thing to production server this weekend.
    Please advise me on this, Please help me. Any help would be highly appreciated.
    I am really in trouble.
    Thanks,
    Pankaj Mehta.

    Try to edit the filter from MaxL command line using
    alter filter sample.basic.filt7 add write on '@IDescendants("ASP")';
    here sample=application
    basic=database
    filt7=filtername
    have good luck

  • HT1349 my laptop got corrupted and recovered but i am not able to connect my iphone to my laptop

    my laptop got corrupted and recovered but i am not able to connect my iphone to my laptop. Pls help me to recovery my iphone.

    I had the same problem with my wife's iPhone 4, go to settings, network an see if 3G is activated in your phone, also check if data is activated, if this don't work, than the problem is not in the phone but with the carrier.
    Your phone may show the 3G or the Edge network icon next to the signal bar, but 3G and Edge may not be really activated for your phone in your carrier network, even if you have a data plan, sometimes their activation department kind of forget to activate the full service in their network, it already happen to us several times.
    Call your carrier and confirm if they really activated the 3G or Edge data in your phone in their network according to your data plan . They may need your phone's EMEI and ICCID numbers, you will find it at settings, info
    Hope that helps

Maybe you are looking for